ipsilon.git/ipsilon/login, branch master

Use mod_auth_gssapi instead of mod_auth_kerb

2015-04-17T20:05:11+00:00

Change configuration on new installs only.

Enable GssapiLocalName so we have access to the local name in
REMOTE_USER and the full principle in GSS_NAME.

Enable GssapiSSLonly even though SSLRequireSSL is also set.
The belt and suspenders principla.

https://fedorahosted.org/ipsilon/ticket/89

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Make the authtest login plugin provide more info

2015-04-10T14:41:22+00:00

Provide more variables to test for in allow attribute and mapping
testing.

Adds givenname (Test User), surname (the username) and
email (username@example.com).

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

Rename and move PluginConfig to ConfigHelper

2015-04-10T14:38:15+00:00

The configuration class was originally intended to be tied. At this
point it is quite generic and useful outside of plugins. Rename
it to something more generic and move it into the config module.

https://fedorahosted.org/ipsilon/ticket/25

Signed-off-by: Rob Crittenden 
Reviewed-by: Simo Sorce

IdP-initiated logout for current user

2015-04-02T02:53:55+00:00

Perform Single Logout for the current user when a logout is initiated
in the IdP.

A fake initial session is created. In the current logout code the
initial logout requestor holds the final redirect URL. In this case
it redirects back to the root IdP page.

https://fedorahosted.org/ipsilon/ticket/87

Signed-off-by: Rob Crittenden 
Reviewed-by: Nathan Kinder

Add a method to Installer classes to validate argument input

2015-03-27T18:46:52+00:00

There was no way to validate argument input from plugins and
cause the installer to bail out. If a plugin needs to validate
some input it can use the validate_args() method and raise
ConfigurationError() if an issue is found.

https://fedorahosted.org/ipsilon/ticket/78

Signed-off-by: Rob Crittenden 
Reviewed-by: Patrick Uiterwijk

Add LDAP test

2015-03-23T14:44:25+00:00

This finally tests the LDAP login/info plugins as well as the special
"groups" attribute.

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

Fix fetching infoldap plugin groups

2015-03-23T14:44:09+00:00

Signed-off-by: Simo Sorce 
Reviewed-by: Patrick Uiterwijk

set SELinux boolean httpd_can_connect_ldap when install infolap and authldap

2015-03-23T11:45:50+00:00

Signed-off-by: John Dennis 
Reviewed-by: Patrick Uiterwijk

Fix error returned from login plugins

2015-03-18T00:37:19+00:00

Some login plugins use form based authentication and let the user retry
on authentication errors. This is fine, however the wrong error code is
returned in this case, 401 should be returned.

Fixes: https://fedorahosted.org/ipsilon/ticket/94

Signed-off-by: Simo Sorce 
Reviewed-by: Nathan Kinder

Fix transaction ID passing for failed authentication

2015-03-03T15:32:37+00:00

Signed-off-by: Patrick Uiterwijk 
Reviewed-by: Simo Sorce